$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/37c4c071-1978-4789-a185-eaaefa7ed267.roa File: 37c4c071-1978-4789-a185-eaaefa7ed267.roa (raw, json) Hash identifier: USK2HWowoCOdPv7PLROUYpeSVfHsKq84eX+It7S9MAg= Subject key identifier: 64:DF:9C:4B:CD:51:AF:98:DC:C4:17:5E:D2:07:4C:F5:42:C6:AE:29 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5E1E3584922DC0F207ADE2314460FBF433D7222A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/37c4c071-1978-4789-a185-eaaefa7ed267.roa Signing time: Fri 26 Sep 2025 17:50:29 +0000 ROA not before: Fri 26 Sep 2025 17:50:29 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1e:35:84:92:2d:c0:f2:07:ad:e2:31:44:60:fb:f4:33:d7:22:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:50:29 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=bc93ea0f5ff86291f53c12817741b9858b331f17f56843ab9ff77a7eedb695c4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:06:c1:8e:98:a3:0e:08:3b:b9:80:2b:ea: c9:41:be:f8:0d:89:08:2f:af:c3:b4:22:8d:01:95: 60:ba:a2:dc:38:a0:08:dc:19:8c:7e:09:c2:dc:d7: 1c:00:88:91:2a:60:65:14:a9:dd:d9:1e:06:8d:9b: 7d:09:5d:05:8f:a9:fd:97:14:22:77:a0:94:c0:d7: 6d:92:6b:bd:4e:1d:e8:f9:25:f2:e3:6d:f0:c7:07: 52:f3:8b:0b:fb:eb:89:40:cd:a5:4b:a9:eb:88:3a: a0:96:3f:ce:70:a4:63:49:76:7e:8a:85:45:7f:95: b4:d4:f6:83:ec:fa:6e:d5:66:46:5f:b2:95:50:01: cd:60:ba:91:3b:19:8e:b9:1d:00:68:25:f6:8b:77: 00:79:64:81:d3:96:df:19:2e:bb:aa:60:00:47:96: c4:12:24:8f:ad:b8:7f:55:cf:3a:e6:53:1e:bf:b8: dc:ec:16:e3:f3:8b:c5:d8:ae:3d:60:cd:1d:89:76: 5b:3e:23:9c:c7:a0:b7:c8:a9:a9:1b:39:26:c3:fd: 27:e9:fc:9a:e9:c0:8c:02:7a:fe:a5:10:d4:2e:14: 0e:a9:15:a3:58:6d:81:1f:36:a1:79:b4:f0:a3:41: 76:72:c1:6e:7e:51:cb:a0:2f:8e:d0:99:f0:01:fd: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DF:9C:4B:CD:51:AF:98:DC:C4:17:5E:D2:07:4C:F5:42:C6:AE:29 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/37c4c071-1978-4789-a185-eaaefa7ed267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 90:cc:72:df:6a:60:e5:e3:93:ca:9f:0e:6c:52:d0:20:3c:f6: 96:fe:53:46:ce:71:13:50:03:13:a5:1a:7d:13:25:fb:2b:23: 65:a1:68:c9:7b:9d:e4:18:a4:df:45:f3:a2:1c:cb:74:a0:f8: d9:77:eb:62:89:a6:9c:40:0a:14:7b:71:a8:b9:6e:75:8e:a4: 38:77:88:8a:d8:c4:90:a1:77:df:1f:37:a6:8b:a7:9f:29:e6: 7a:32:59:ed:8c:d4:2e:99:53:9c:13:81:ef:db:be:c8:28:fa: fe:dd:57:c2:41:12:3a:70:f8:7d:bb:67:82:2b:d6:cb:94:64: d2:7c:94:03:c6:99:dc:ce:f1:79:c1:7a:ac:e0:e6:e1:57:87: e3:f7:d3:e0:92:42:9c:ae:2b:58:15:76:81:7a:38:29:5e:68: fb:28:aa:72:37:b8:b1:c7:c7:6c:85:13:a1:6a:ab:f3:e1:73: f4:81:cc:64:a0:84:48:fa:ee:31:2d:7e:cb:8a:b3:bc:ef:cd: 91:ae:9f:44:f0:8b:11:03:91:1c:45:5b:32:24:ef:01:1a:34: 7a:bd:74:95:34:b4:c3:a6:59:95:3b:81:98:0e:ac:c8:60:50: bf:00:ba:c0:72:2e:15:dd:b5:3b:e6:21:28:55:6a:d9:76:9b: e5:04:83:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXh41hJItwPIHreIxRGD79DPXIiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MDI5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzkzZWEwZjVmZjg2MjkxZjUzYzEyODE3NzQxYjk4NThi MzMxZjE3ZjU2ODQzYWI5ZmY3N2E3ZWVkYjY5NWM0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq5QbBjpijDgg7uYAr6slBvvgNiQgvr8O0Io0BlWC6otw4 oAjcGYx+CcLc1xwAiJEqYGUUqd3ZHgaNm30JXQWPqf2XFCJ3oJTA122Sa71OHej5 JfLjbfDHB1Lziwv764lAzaVLqeuIOqCWP85wpGNJdn6KhUV/lbTU9oPs+m7VZkZf spVQAc1gupE7GY65HQBoJfaLdwB5ZIHTlt8ZLruqYABHlsQSJI+tuH9VzzrmUx6/ uNzsFuPzi8XYrj1gzR2Jdls+I5zHoLfIqakbOSbD/Sfp/JrpwIwCev6lENQuFA6p FaNYbYEfNqF5tPCjQXZywW5+UcugL47QmfAB/d2DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZN+cS81Rr5jcxBde0gdM9ULGrikwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM3YzRjMDcxLTE5NzgtNDc4OS1hMTg1LWVhYWVmYTdlZDI2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAJDMct9qYOXjk8qfDmxS0CA8 9pb+U0bOcRNQAxOlGn0TJfsrI2WhaMl7neQYpN9F86Icy3Sg+Nl362KJppxAChR7 cai5bnWOpDh3iIrYxJChd98fN6aLp58p5noyWe2M1C6ZU5wTge/bvsgo+v7dV8JB Ejpw+H27Z4Ir1suUZNJ8lAPGmdzO8XnBeqzg5uFXh+P30+CSQpyuK1gVdoF6OCle aPsoqnI3uLHHx2yFE6Fqq/Phc/SBzGSghEj67jEtfsuKs7zvzZGun0TwixEDkRxF WzIk7wEaNHq9dJU0tMOmWZU7gZgOrMhgUL8AusByLhXdtTvmIShVatl2m+UEg0A= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:37 2025 by rpki-client